Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
File:                     NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft (raw, json)
Hash identifier:          Vivby1MYRi33sXExh8I8oVzTFMZY86Fk2H+tP8Lb+Zw=
Subject key identifier:   ED:6C:AC:4A:76:1C:98:05:D5:AC:A3:04:0A:D8:83:C4:1F:66:46:2D
Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
Certificate issuer:       /CN=36368aac0f4a28c8a31760f06b578dae453146f0
Certificate serial:       01935878D47D47E3690B8043FD779B001BB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 10:02:13 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:13 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:13 +0000
Files and hashes:         1: NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl (hash: zgm1odzqPpZ1kAXLRJ2dQHieXHkvxUojV7ycQyUA/jw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:d4:7d:47:e3:69:0b:80:43:fd:77:9b:00:1b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0
        Validity
            Not Before: Nov 23 10:02:13 2024 GMT
            Not After : Nov 24 10:02:13 2024 GMT
        Subject: CN=ed6cac4a761c9805d5aca3040ad883c41f66462d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5c:d2:1b:8a:57:a9:41:82:db:f4:28:f1:0b:
                    1d:b7:ca:fe:ac:ee:8a:d8:e7:08:01:2d:62:59:0c:
                    cd:a9:b8:6e:d9:dc:5a:ee:b9:87:a7:e1:99:aa:46:
                    60:68:43:f1:20:ec:4a:e8:dc:08:6f:5b:42:b5:9a:
                    07:ac:46:fe:17:44:29:cd:b0:20:aa:9f:2f:38:7c:
                    51:52:cc:9d:99:b0:dd:cb:e7:1c:9e:5a:4a:ec:0e:
                    77:56:a4:ba:57:47:f7:b4:9c:27:ec:37:b9:eb:8b:
                    63:0e:98:96:40:d5:cb:44:8e:dd:1f:2b:57:12:7a:
                    62:39:82:40:56:a8:d5:15:64:af:a9:3f:cd:51:90:
                    6d:2d:96:9e:a9:b8:37:3d:bc:e5:3c:e7:7f:6f:99:
                    d7:64:1a:45:27:76:50:1b:d0:72:28:e3:49:d7:15:
                    51:bb:96:a1:c5:11:b7:d0:10:6b:e3:d0:8b:fe:09:
                    98:53:38:f9:f6:27:18:3d:20:fe:c2:87:da:a1:9f:
                    92:7b:28:1b:0d:ce:8a:88:1a:0e:3f:37:4a:75:e9:
                    9a:61:00:60:c4:09:d1:2a:cf:f7:c2:82:0e:72:2f:
                    d2:b3:28:10:d1:86:2c:bd:da:a1:ea:41:fd:11:9b:
                    b9:b8:58:69:cf:0c:ac:0b:96:44:63:6a:dd:78:4d:
                    38:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6C:AC:4A:76:1C:98:05:D5:AC:A3:04:0A:D8:83:C4:1F:66:46:2D
            X509v3 Authority Key Identifier:
                keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a5:d3:c1:b5:85:c5:a4:78:f9:8b:7a:8b:13:de:df:04:ae:
         31:e1:3f:97:ca:fc:ad:b4:04:a1:5c:1a:1b:60:5c:6c:19:94:
         8c:54:11:c9:cf:b1:1a:b9:77:8d:6a:b4:ca:2d:2e:06:a6:d8:
         cd:58:ba:5e:b6:72:d3:24:80:25:29:64:07:78:a6:8f:d4:f9:
         28:d6:41:b6:e4:91:58:e7:99:bc:96:84:aa:84:f5:92:f1:94:
         81:c3:bc:34:9f:15:09:ca:8e:a5:03:51:2f:1d:56:7d:96:cf:
         71:86:0c:ad:72:31:0e:2e:29:30:5c:df:c1:e1:a6:5e:41:06:
         a2:ec:31:3a:a4:d4:d9:1b:3d:9a:a1:be:07:bd:0a:c1:1d:75:
         c2:f6:3c:e4:ff:d1:19:58:4a:e3:f6:f0:4b:7e:11:3a:7c:cb:
         77:0d:4f:1a:ae:5e:3c:2f:cd:81:49:87:7a:a3:48:3f:5b:f5:
         09:a1:2c:ff:20:47:4b:ae:87:93:95:71:a5:98:85:46:50:a4:
         16:37:49:94:a4:5b:dd:6a:e4:51:df:1b:3f:a5:11:6c:81:08:
         d3:0b:ca:b8:ac:aa:b8:5a:37:ad:c5:f7:ed:20:fd:8a:c2:a3:
         0c:cc:8e:ab:de:a6:02:86:05:f9:bd:4a:18:ff:c6:03:23:52:
         d2:af:49:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:17 2024 by rpki-client on console-ams.rpki-client.org